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ABSTRACT OF THE DISCLOSURE 

An address allocated to a user by an authentication server is used as 
an IP address of a packet which is transmitted from a user terminal, 
preventing an illicit use if the IP address were eavesdropped. An 
5 authentication server 100 performs an authentication of a user based on a user 
authentication information which is transmitted from the user terminal, and 
upon a successful authentication, allocates an address to the user terminal, and 
issues a ticket containing the address to be returned to the user terminal. The 
user terminal sets up the address contained in the ticket as a source address, 

10 and transmits the ticket to the application server 300, requesting a session to 
be established. After verifying that the ticket is authentic, the server 300 
stores the ticket and establishes a session with the user terminal. The user 
terminal transmits a service request packet containing the source address to 
the server 300 utilizing the session. If the source address coincides with the 

15 address contained in the stored ticket, the server 300 provides a service to the 
user. 
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BBB (57) Abstrac t: An address assigned to a user by an authentication server is used as an IP address of a packet transmitted from a 
user terminal. The IP address cannot be used for a bad purpose even when it is stolen. The authentication server (100) authenticates 
the user according to user authentication information transmitted from the user terminal. When the authentication is successful, an 
address is assigned to the user terminal and a ticket containing the address is issued and returned to the user terminal. The user 
terminal sets the address contained in the ticket as a transmission source address and transmits the ticket to an application server 
(300) to request to establish a session. After the server (300) checks whether the ticket is valid and stores the ticket if valid before 
establishing a session with the user terminal. By using this session, the user terminal transmits a packet requesting a service including 
I the transmission source address to the server (300). The server (300) provides the service to the user if the transmission source address 
coincides with the address contained in the ticket stored. 
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